5.2 Determine the Appropriate Sensor Update Policy Settings in Order to Control the Update Process CCFA Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   An administrator manages a fleet where a recent sensor update caused a critical application to crash on a subset of endpoints. The vendor has released a new build that fixes the issue. The administrator wants to roll out the new build to the affected endpoints immediately, but to the rest of the fleet only after a 72-hour observation period. What is the best approach?

   • ACreate a single policy with a 72-hour delay and assign it to all endpoints, then manually update the affected endpoints.
   • BCreate a single policy with a 72-hour delay and assign it to all endpoints, accepting that the affected endpoints will wait.
   • CCreate two policies: one with a 0-day delay for the affected endpoints and one with a 72-hour delay for the rest, assigning each to the appropriate group.
   • DCreate a single policy with a 0-day delay and assign it to all endpoints, then rely on the vendor to recall the build if issues occur.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An organization has a group of servers that must not be updated automatically because they run legacy applications. The administrator wants to ensure these servers are excluded from the automatic sensor update process while still being managed by other policies. What is the best way to achieve this?

   • ADo not assign any sensor update policy to the server group.
   • BCreate a sensor update policy with a maintenance window that never occurs.
   • CAssign the default sensor update policy to the server group and manually uninstall updates after they are applied.
   • DCreate a sensor update policy with a very long delay (e.g., 365 days) and assign it to the server group.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company wants to ensure that sensor updates are applied only after a new build has been available for 24 hours, to allow time for any immediate issues to be reported. Which sensor update policy setting should be used?

   • ASet the delay to 24 hours.
   • BSet the idle time to 24 hours.
   • CSet the maintenance window to start 24 hours after the build is released.
   • DSet the update frequency to 24 hours.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An organization has endpoints in multiple time zones. The administrator wants to ensure that sensor updates are applied during off-peak hours in each region, but the update policy only allows one maintenance window. What is the most effective way to handle this constraint?

   • ASet a single maintenance window that falls during off-peak hours for the largest region and accept updates at other times for smaller regions.
   • BUse a single policy with a 24-hour maintenance window so updates can occur at any time.
   • CCreate separate sensor update policies for each time zone, each with a maintenance window aligned to that region's off-peak hours, and assign them to the corresponding endpoint groups.
   • DDisable the maintenance window and rely on the sensor to update automatically whenever the build is available.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   An administrator is responsible for 10,000 endpoints across two divisions. Division A requires updates within 24 hours of release, while Division B requires a 7-day observation period before any update is applied. The administrator wants to use a single sensor update policy to simplify management. What is the most appropriate action?

   • ACreate one policy with a 3-day delay as a compromise and assign it to both divisions.
   • BCreate one policy with a 0-day delay and assign it to both divisions, then manually delay updates for Division B.
   • CCreate one policy with a 7-day delay and assign it to both divisions, accepting that Division A will not meet its 24-hour requirement.
   • DCreate two separate policies: one with a 0-day delay for Division A and one with a 7-day delay for Division B, assigning each to the appropriate group.
   Reveal Solution Discussion Select an answer first